If the user digits html tags everything is messed up

I think is correct to escape html characters. If the user types something like
<div style="height:100px">Hello man!</div> in the textare everything is messed up.
With this patch we escape html characters